We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you two Citrix podcasts. Learn about 2020 trends and get answers to your biggest Citrix questions!Listen Now

x

Setting up a Domain controller to sync with an internet time source through Microsoft Proxy server 2004

miket71
miket71 asked
on
Medium Priority
446 Views
Last Modified: 2012-08-13
Hello,

I am in need of assistance with setting up a Domain Controller as a Reliable Time Source, but I'm not sure how to configure a Microsoft Proxy Server (2004) to allow the Domain Controller to get access to a time server with the NTP protocol.  Or, maybe it would be better if I setup the proxy server itself to pull time from the internet, and set one reliable time sourced domain controller to point to it.  I am currently testing TimeTools SNTP Time Client to possibly use as a client, but I was wondering if there are suggestions for another time client to try.  Perhaps one that can be setup as a service so it don't have to be running on the desktop all the time.

Thanks,
Mike
Comment
Watch Question

CERTIFIED EXPERT
Author of the Year 2011
Top Expert 2006
Commented:
Hi mike71,
This should get you started: http://tf.nist.gov/service/its.htm

Post back with any specific questions.


Vic

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts

Author

Commented:
Can this one run as a service rather than an application?
CERTIFIED EXPERT
Author of the Year 2011
Top Expert 2006

Commented:
Service - w32time runs as a client service.

As a general comment, a 'C' grade is the lowest possible grade you can give to someone who is trying to help.
If you have questions or need more specifics, please ask before deciding on a grade.

Author

Commented:
Sorry, I don't know how to use this site very well.  I just started yesterday.

Author

Commented:
I was unable to find the download link for the software at the site provided above.  All I really want to do is setup our ISA 2004 server to allow the NTP protocol to pass though it so that it or a DC server, or ISA server, can update the correct time from outside.  I would like to make it work with a time client program that can run as a service, or use the registry to work with the w32time service.  I'm thinking that I should setup the ISA server to pull time from an external time domain, then set a DC to pull time from ISA, set the DC as a reliable source, then let all other DCs and PCs pull time updates from the reliable source DC.
CERTIFIED EXPERT
Author of the Year 2011
Top Expert 2006

Commented:
Try this link to MS (and let's hope this link is functional).

http://support.microsoft.com/kb/323621

Author

Commented:
The link was kind of handy.  I tried to translate the steps the best I could.  At this point, the ISA server is my roadblock.  Even though I opened the NTP protocol on it via UDP at port 123, and set it to allow a specific DC to communicate to an outside time source, the DC is still unable to do it.  I know that the ISA server doesn't allow any pinging to go throught it.  It only allows domain names to resolve to IP addresses when I ping a domain name.  I set the server to not go anywhere for time updates for now, and made it become a reliable time source for the clients and other DCs.  I'm not sure how critical it is that the main DC be able to go outside to get time updates.
CERTIFIED EXPERT
Author of the Year 2011
Top Expert 2006

Commented:
Warning you up front - this is a guess.

You might be able to configure your 'HOSTS' file with the IP address and URL of the outside time source.

Your HOSTS (no extension) file should be in your SYSTEM32\DRIVERS\ETC folder.

ADD: 192.168.10.1     companyweb  (enter the actual IP and company URL)
BLOCK: 127.0.0.1       badwebsite ( use the 127.0.0.0 and the actual bad site)

Author

Commented:
I thought that the hosts file only worked for static resolutions though.  When I ping time.windows.com for example, it resolves to IP, but there is no reply.  I tried adding it to the hosts file anyways just to try it, but I have the same results.
CERTIFIED EXPERT
Author of the Year 2011
Top Expert 2006

Commented:
As long as your DC is the time source, the critical function is being met.
Just keep an eye on the DC.

(I told you it was just a guess.)

:)
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.